Welcome!

News Feed Item

Appian Achieves Several New Audit Reports Across Global Footprint

Appian Receives SOC 2 Type 2, SOC 1 Type 2, and ISAE 3402 Audit Reports to Bolster Existing Accreditations

RESTON, VA -- (Marketwired) -- 08/13/14 -- Appian, the market leader in modern business process management (BPM) and Case Management software, today announced that the Appian Cloud has received a Service Organization Controls (SOC) 2 Type 2 audit report. In addition, Appian has completed new audits for SOC 1 Type 2 and International Standard on Assurance Engagements (ISAE) 3402. These audits compliment Appian Cloud's existing security certifications and its control architecture has already helped clients meet both industry specific and geographic specific regulatory requirements, including PCI DSS, National Institute of Standards and Technology (NIST) 800-53 moderate controls, FDA 21 CFR Part 11, FISMA Moderate Authority to Operate (ATO), European Union Data Privacy and Australian Privacy Act.

Appian Cloud is recognized as the leading BPM Platform as a Service (PaaS) for the delivery of production applications. Appian Cloud has been given a "Strong Positive" rating (the highest rating in the report methodology) in the most recent Gartner, Inc. "MarketScope for Business Process Management Platform as a Service" report (Gartner, Inc. "MarketScope for Business Process Management Platform as a Service," by M. Cantara, et al, November 15, 2013).

Hundreds of global organizations across financial services, insurance, pharmaceuticals, government, retail and other industries use Appian Cloud in full production to rapidly deliver transformational business applications. Appian's Work Platform combination of enterprise data navigation, process management, native mobility and social collaboration accelerates smarter business decisions and actions, improves operational efficiency and optimizes the customer experience. Unlike typical PaaS/SaaS providers, Appian customer deployments are fully portable between Appian Cloud and on-premise Appian environments, reducing the perceived risk of cloud computing even further. Appian Cloud also delivers a 99.95 percent SLA.

Appian Cloud's updated SOC 2 Type 2 audit was prepared taking into consideration the attestation standards established by the American Institute of Certified Public Accountants (the "AICPA"). The SOC 2 report provides a detailed review, by an independent audit firm, of Appian Cloud's security, availability, and confidentiality controls. SOC 2 reports focus on controls at a service organization relevant to the following principles:

  • Security: The system is protected against unauthorized access (both physical and logical)
  • Availability: The system is available for operation and use as committed or agreed
  • Processing Integrity: System processing is complete, accurate, timely, and authorized
  • Confidentiality: Information designated as confidential is protected as committed or agreed
  • Privacy: Personal information is collected, used, retained, disclosed, and destroyed in conformity with the commitments in the entity's privacy notice and with criteria set forth in generally accepted privacy principles issued by the AICPA and CICA

Appian's new ISAE 3402 audit report is similar to Appian's SOC 1 Type 2 audit, but utilizes an international standard. ISAE 3402 was developed to provide an international assurance standard for allowing public accountants to issue a report for use by user organizations and their auditors (user auditors) on the controls at a service organization that are likely to impact or be a part of the user organization's system of internal control over financial reporting.

"Appian Cloud provides enterprise-grade security and compliance that meets the demanding requirements of a broad range of regulated and unregulated industries," said Myles Weber, Vice President of Cloud and Community Services at Appian. "Our latest audits give assurance to our customers that they can safely and rapidly drive business innovation with our platform."

Appian provides all the necessary components to rapidly deploy new process-based applications in the cloud via Platform as a Service. Users can easily design, execute, manage, and optimize key business applications through a simple web browser. Appian Cloud features attributes such as instant project start, state-of-the-art enabling technologies, continuous innovation, native mobile apps, personalized branding, simplified operations, support for corporate system integrations and localized hosting (USA, EU, APAC, South America).

About Appian
As the market leader in modern BPM software, Appian delivers a Work Platform that unites users with all their data, processes, and collaborations -- in one environment, on any mobile device, through a simple social interface. Appian's Business Process Management (BPM) Suite seamlessly integrates work automation with native mobile and social capabilities. Appian is available on-premise and in the cloud, with complete portability. More than 3.5 million users, from Fortune 100 companies to the mid-market and small businesses worldwide, trust Appian to power their critical business processes. For more information, visit www.appian.com.

For Information Contact:
Mike Ingrisano
Media Relations Manager
+1 703.434.3356
Email Contact

More Stories By Marketwired .

Copyright © 2009 Marketwired. All rights reserved. All the news releases provided by Marketwired are copyrighted. Any forms of copying other than an individual user's personal reference without express written permission is prohibited. Further distribution of these materials is strictly forbidden, including but not limited to, posting, emailing, faxing, archiving in a public database, redistributing via a computer network or in a printed form.

Latest Stories
Who are you? How do you introduce yourself? Do you use a name, or do you greet a friend by the last four digits of his social security number? Assuming you don’t, why are we content to associate our identity with 10 random digits assigned by our phone company? Identity is an issue that affects everyone, but as individuals we don’t spend a lot of time thinking about it. In his session at @ThingsExpo, Ben Klang, Founder & President of Mojo Lingo, discussed the impact of technology on identity. Sho...
Technology vendors and analysts are eager to paint a rosy picture of how wonderful IoT is and why your deployment will be great with the use of their products and services. While it is easy to showcase successful IoT solutions, identifying IoT systems that missed the mark or failed can often provide more in the way of key lessons learned. In his session at @ThingsExpo, Peter Vanderminden, Principal Industry Analyst for IoT & Digital Supply Chain to Flatiron Strategies, will focus on how IoT depl...
Data is an unusual currency; it is not restricted by the same transactional limitations as money or people. In fact, the more that you leverage your data across multiple business use cases, the more valuable it becomes to the organization. And the same can be said about the organization’s analytics. In his session at 19th Cloud Expo, Bill Schmarzo, CTO for the Big Data Practice at Dell EMC, introduced a methodology for capturing, enriching and sharing data (and analytics) across the organization...
With all the incredible momentum behind the Internet of Things (IoT) industry, it is easy to forget that not a single CEO wakes up and wonders if “my IoT is broken.” What they wonder is if they are making the right decisions to do all they can to increase revenue, decrease costs, and improve customer experience – effectively the same challenges they have always had in growing their business. The exciting thing about the IoT industry is now these decisions can be better, faster, and smarter. Now ...
WebRTC is about the data channel as much as about video and audio conferencing. However, basically all commercial WebRTC applications have been built with a focus on audio and video. The handling of “data” has been limited to text chat and file download – all other data sharing seems to end with screensharing. What is holding back a more intensive use of peer-to-peer data? In her session at @ThingsExpo, Dr Silvia Pfeiffer, WebRTC Applications Team Lead at National ICT Australia, looked at differ...
"Splunk basically takes machine data and we make it usable, valuable and accessible for everyone. The way that plays in DevOps is - we need to make data-driven decisions to delivering applications," explained Andi Mann, Chief Technology Advocate at Splunk and @DevOpsSummit Conference Chair, in this SYS-CON.tv interview at @DevOpsSummit at 19th Cloud Expo, held November 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA.
The cloud market growth today is largely in public clouds. While there is a lot of spend in IT departments in virtualization, these aren’t yet translating into a true “cloud” experience within the enterprise. What is stopping the growth of the “private cloud” market? In his general session at 18th Cloud Expo, Nara Rajagopalan, CEO of Accelerite, explored the challenges in deploying, managing, and getting adoption for a private cloud within an enterprise. What are the key differences between wh...
"Logz.io is a log analytics platform. We offer the ELK stack, which is the most common log analytics platform in the world. We offer it as a cloud service," explained Tomer Levy, co-founder and CEO of Logz.io, in this SYS-CON.tv interview at DevOps Summit, held November 3-5, 2015, at the Santa Clara Convention Center in Santa Clara, CA.
Adding public cloud resources to an existing application can be a daunting process. The tools that you currently use to manage the software and hardware outside the cloud aren’t always the best tools to efficiently grow into the cloud. All of the major configuration management tools have cloud orchestration plugins that can be leveraged, but there are also cloud-native tools that can dramatically improve the efficiency of managing your application lifecycle. In his session at 18th Cloud Expo, ...
In his session at @DevOpsSummit at 19th Cloud Expo, Robert Doyle, lead architect at eCube Systems, will examine the issues and need for an agile infrastructure and show the advantages of capturing developer knowledge in an exportable file for migration into production. He will introduce the use of NXTmonitor, a next-generation DevOps tool that captures application environments, dependencies and start/stop procedures in a portable configuration file with an easy-to-use GUI. In addition to captur...
"ReadyTalk is an audio and web video conferencing provider. We've really come to embrace WebRTC as the platform for our future of technology," explained Dan Cunningham, CTO of ReadyTalk, in this SYS-CON.tv interview at WebRTC Summit at 19th Cloud Expo, held November 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA.
Due of the rise of Hadoop, many enterprises are now deploying their first small clusters of 10 to 20 servers. At this small scale, the complexity of operating the cluster looks and feels like general data center servers. It is not until the clusters scale, as they inevitably do, when the pain caused by the exponential complexity becomes apparent. We've seen this problem occur time and time again. In his session at Big Data Expo, Greg Bruno, Vice President of Engineering and co-founder of StackIQ...
One of the hottest areas in cloud right now is DRaaS and related offerings. In his session at 16th Cloud Expo, Dale Levesque, Disaster Recovery Product Manager with Windstream's Cloud and Data Center Marketing team, will discuss the benefits of the cloud model, which far outweigh the traditional approach, and how enterprises need to ensure that their needs are properly being met.
Containers have changed the mind of IT in DevOps. They enable developers to work with dev, test, stage and production environments identically. Containers provide the right abstraction for microservices and many cloud platforms have integrated them into deployment pipelines. DevOps and Containers together help companies to achieve their business goals faster and more effectively. In his session at DevOps Summit, Ruslan Synytsky, CEO and Co-founder of Jelastic, reviewed the current landscape of D...
In 2014, Amazon announced a new form of compute called Lambda. We didn't know it at the time, but this represented a fundamental shift in what we expect from cloud computing. Now, all of the major cloud computing vendors want to take part in this disruptive technology. In his session at 20th Cloud Expo, John Jelinek IV, a web developer at Linux Academy, will discuss why major players like AWS, Microsoft Azure, IBM Bluemix, and Google Cloud Platform are all trying to sidestep VMs and containers...